Multiple APPCRASH events seen in Windows Event Viewer on hub
search cancel

Multiple APPCRASH events seen in Windows Event Viewer on hub

book

Article ID: 277520

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM) CA Unified Infrastructure Management On-Premise (Nimsoft / UIM) CA Unified Infrastructure Management SaaS (Nimsoft / UIM)

Issue/Introduction

Several events are being registered in the Windows registry where it indicates that the hub.exe application is giving an error, as well as the distsrv.exe.

This happens randomly during the whole day, we don't know if this directly affects the UIM operation but it doesn't seem to have any bad effects on the hub/robot.

In the Events viewer, there are conf_oracle, oracle, ntdll, hub.exe, as well as distsrv.exe crashes/"APPCRASH"

Environment

  • DX UIM 20.4 CU9
  • Windows 2016
  • hub 9.40
  • robot 9.40

Cause

  • Environment/OS

Resolution

Multiple tests performed
This was tested in a DX UIM v20.4 CU7/CU8/CU9 environment. No crashes with hub and robot v9.40 with Windows 2016/2019. Not reproducible. The consultant tested as well and it was reproducible in one case but not another.

Windows Updates
Please ensure all Windows servers with these crashes in the Windows events log are up-to-date, reboot the server, and also reinstall v9.40 of the robot and then the hub. Note that the update may finish with 'Unknown status' but that is ok. Note also that it is noticeable in the Windows events log that Windows updates had failed repeatedly in the past. (Event Name: WindowsUpdateFailure3)

Event ID 1001
Windows Event ID 1001 (seen repeatedly in the events viewer) could also be caused by Windows Defender scans if it's enabled, but 1001 is a generic error and can indicate one or more problems with the OS. Therefore it is advisable to ask the Windows admin to take a closer look at those machines and their event logs.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus?view=o365-worldwide#event-id-1001